IN THE CLAIMS 

This listing of the claim will replace all prior versions and listings of 
claim in the present application. 
Listing of Claims 

1. (currently amended) An information processing method for 
calculating x*(2 A n) mod P for an input value x larger than a prime number P, 
the operator A denoting powe r without directly obtaining x*(2 A n) mod P of the 
input value x divided by P. thereby making the estimation of P difficult in a 
tamper resistant storage device, said tamper resistant storage device includes 
an information processing apparatus , said information processing method 
being executed by said afMnformation processing apparatus which includes 
compr i s i ng a fffs^memory being of at least n bits sufficient for storing the 
modulus P, a s e cond m e mory also being of at least m bits sufficient for storing 
said input value x T and a third m e mory for storing 2 A (2m+n) mod P A and a 
Montgomery modular multiplication device, said information processing 
method , being executed by said information processing apparatus, comprising 
the steps of: 

storing said input value x in said fifs^memory of n b i ts ; 

calculating 2 A (2m+n) mod P or reading said 2 A (2m+n) mod P from said 
thifd-memory by said Montgomery modular multiplication device; 

reading said input value x from said test-memory of n b i ts ; 

calculating x1 = x*2 A (2m+n)*(2 A (-m)) mod P = x*2 A (m+n) mod P by 
said Montgomery modular multiplication device; 

calculating x2 = x1*(2 A (-m)) mod P = x*(2 A n) mod P to transfer said 
input value x into x*(2 A n) mod P without explicitly obtaining x mod P; and 
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storing said transferred value. 



2. (currently amended) An information processing method for 
calculating x*(2 A n) mod P for an input value x larger than a prime number P, 
the operator A denoting power , without directly obtaining x*(2 A n) mod P of the 
input value x divided by P. thereby making the estimation of P difficult in a 
tamper resistant storage device, said tamper resistant storage device includes 
an information processing apparatus , said information processing method 
being executed by said aft-information processing apparatus which includes 
comprising a ftfs^memory being of at least n bits sufficient for storing the 
modulus modul e s P, also being a s e cond m e mory of at least m bits sufficient 
for storing said input value x T a th i rd memory for storing 2 A (m+2n) mod P and 
a Montgomery modular multiplication device, said information processing 
method , being executed by said information processing apparatus, comprising 
the steps of: 

storing said input value x in said fifst-memory of n b i ts ; 

calculating 2 A (m+2n) mod P or reading said 2 A (m+2n) mod P from said 
thifd-memory by said Montgomery modular multiplication device; 

reading said input value x from said sad i first memory of n b i ts ; 

calculating x1 = x*2 A (m+2n)*(2 A (-m)) mod P = x*2 A (2n) mod P by said 
Montgomery modular multiplication device; and 

calculating x2 = x1*(2 A (-n)) mod P = x*(2 A n) mod P to transfer said 
input value x into x*(2 A n) mod P without explicitly obtaining x mod P; and 

storing said transferred value. 
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Claim 3 (canceled). 

4. (currently amended) The information processing method of 
claim 1 x for an RSA cryptosystem method using Chinese Remainder 
Theorem, said method comprising the steps of: 

calculating mod P using the information processing method according 
to claim 1 and encrypting said input value x; and 
storing said encrypted input value x. 

5. (currently amended) The information processing method of 
claim 2 A for an RSA cryptosystem method using Chinese Remainder 
Theorem, said method further comprising the steps of: 

calculating mod P using the information processing method according 
to claim 2, and encrypting said input value x; and 
storing said encrypted input value x. 

6. (currently amended) An information processing apparatus x 
included in a tamper resistant storage device, for calculating x*(2 A n)mod P for 
an input value x larger than a prime number P, the operator A denoting power, 
without directly obtaining x*(2 A n) mod P of the input value x divided by P, 
thereby making the estimation of P difficult in said tamper resistant storage 
device , said information processing apparatus comprising: 

a memory of at least n bits sufficient for storing the modulus Pj ± 
wherein said a-memorv being also of at least m bits sufficient for 
storing said input value x, and 
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a Montgomery modular multiplication device, wherein said Montgomery 
modular multiplication device adapted to execute the steps of 
calculating 2 A (2m+n) mod P; 

reading said input value x from said memory of n b i ts ; and 
calculating x1=x*2 A (2m+n)*(2 A (-m)) mod P=x*2 A (m+n) mod P and - 

x2=x1*(2 A (-m)) mod P = x*(2 A n) mod P to transfer said input value x into 

x*(2 A n) mod P without explicitly obtaining x mod P. 
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